Threats tagged 'bit-redis-2025-62507'

A vulnerability in Redis versions 8.2.0 through 8.2.2 allows a user to trigger a stack buffer overflow by running the XACKDEL command with multiple IDs. This flaw may lead to remote code execution. The issue is fixed in Redis version 8.2.3. As a workaround, administrators can restrict the XACKDEL command using ACLs to prevent exploitation without applying the patch.